@openkaiden/opnshll-sdk 0.1.1 → 0.1.3

package/dist/gen/openshell_pb.d.ts

@@ -480,6 +480,14 @@ export type Sandbox = Message<"openshell.v1.Sandbox"> & {
      * @generated from field: openshell.v1.SandboxStatus status = 3;
      */
     status?: SandboxStatus | undefined;
+    /**
+     * Read-only SSH host identity in OpenSSH SHA256:<base64> form. Stable for
+     * this sandbox's lifetime, including runtime restarts. Empty on legacy
+     * runtimes that do not provide a gateway-managed SSH identity.
+     *
+     * @generated from field: string host_key_fingerprint = 6;
+     */
+    hostKeyFingerprint: string;
     /**
      * Read-only provenance for sandboxes created from a reusable workload template.
      *
@@ -558,6 +566,13 @@ export type SandboxSpec = Message<"openshell.v1.SandboxSpec"> & {
      * @generated from field: string provider_attachment_epoch = 14;
      */
     providerAttachmentEpoch: string;
+    /**
+     * Gateway-owned policy for replacing the sandbox runtime after the canonical
+     * main process exits. Unspecified is normalized to Never before persistence.
+     *
+     * @generated from field: openshell.v1.SandboxRestartPolicy restart_policy = 15;
+     */
+    restartPolicy: SandboxRestartPolicy;
 };
 /**
  * Describes the message openshell.v1.SandboxSpec.
@@ -902,9 +917,8 @@ export type SandboxStatus = Message<"openshell.v1.SandboxStatus"> & {
      */
     mainProcessInstanceId: string;
     /**
-     * Normalized main process result. Signal exits use 128 + signal number.
-     * Presence indicates that the canonical main process exited. Exit code 0
-     * produces Completed; nonzero and signal-normalized exits produce Error.
+     * Most recent normalized main process result. Signal exits use 128 + signal number.
+     * Cleared when a replacement main process becomes ready.
      *
      * @generated from field: optional int32 exit_code = 9;
      */
@@ -930,11 +944,29 @@ export type SandboxStatus = Message<"openshell.v1.SandboxStatus"> & {
      */
     configurationActivated?: boolean | undefined;
     /**
-     * Gateway-owned repair window. Retained after timeout for inspection and retry.
+     * Gateway-owned provisioning deadlines, retained after timeout for inspection and retry.
      *
      * @generated from field: openshell.v1.SandboxProvisioning provisioning = 13;
      */
     provisioning?: SandboxProvisioning | undefined;
+    /**
+     * Consecutive policy-driven restart number in the current crash loop.
+     *
+     * @generated from field: uint32 restart_count = 14;
+     */
+    restartCount: number;
+    /**
+     * Deadline for the next restart attempt or recovery check.
+     *
+     * @generated from field: google.protobuf.Timestamp next_restart_time = 15;
+     */
+    nextRestartTime?: Timestamp | undefined;
+    /**
+     * Time when the current main process became ready.
+     *
+     * @generated from field: google.protobuf.Timestamp main_process_started_time = 16;
+     */
+    mainProcessStartedTime?: Timestamp | undefined;
 };
 /**
  * Describes the message openshell.v1.SandboxStatus.
@@ -2257,7 +2289,8 @@ export type CreateSshSessionResponse = Message<"openshell.v1.CreateSshSessionRes
      */
     gatewayScheme: string;
     /**
-     * Optional host key fingerprint. If non-empty, [A-Za-z0-9:+/=-] only.
+     * Expected sandbox SSH host identity in OpenSSH SHA256:<base64> form.
+     * Stable for the sandbox's lifetime. Empty only for legacy runtimes.
      *
      * @generated from field: string host_key_fingerprint = 7;
      */
@@ -2315,6 +2348,12 @@ export type ExposeServiceRequest = Message<"openshell.v1.ExposeServiceRequest">
      * @generated from field: string request_id = 6;
      */
     requestId: string;
+    /**
+     * Application authorization behavior. Omission resolves to STRIP.
+     *
+     * @generated from field: openshell.v1.ServiceAuthorizationMode authorization_mode = 7;
+     */
+    authorizationMode: ServiceAuthorizationMode;
 };
 /**
  * Describes the message openshell.v1.ExposeServiceRequest.
@@ -2506,6 +2545,12 @@ export type ServiceEndpoint = Message<"openshell.v1.ServiceEndpoint"> & {
      * @generated from field: bool domain = 6;
      */
     domain: boolean;
+    /**
+     * Effective application authorization behavior for ingress requests.
+     *
+     * @generated from field: openshell.v1.ServiceAuthorizationMode authorization_mode = 7;
+     */
+    authorizationMode: ServiceAuthorizationMode;
 };
 /**
  * Describes the message openshell.v1.ServiceEndpoint.
@@ -3697,6 +3742,16 @@ export type ProviderProfileCredential = Message<"openshell.v1.ProviderProfileCre
      * @generated from field: openshell.v1.ProviderCredentialTokenGrant token_grant = 10;
      */
     tokenGrant?: ProviderCredentialTokenGrant | undefined;
+    /**
+     * Output-only gateway-derived endpoint authorities for resolved token grants.
+     * For inspected L7 requests, empty means no endpoint may obtain this grant.
+     * L4 injection uses selectors without checking these authorities.
+     * Profile-authored values are ignored; normal policies name the originating
+     * provider endpoint, while a global policy uses its own endpoint authorities.
+     *
+     * @generated from field: repeated string token_grant_owners = 11;
+     */
+    tokenGrantOwners: string[];
 };
 /**
  * Describes the message openshell.v1.ProviderProfileCredential.
@@ -4156,12 +4211,49 @@ export type ProviderProfile = Message<"openshell.v1.ProviderProfile"> & {
      * @generated from field: string scope = 13;
      */
     scope: string;
+    /**
+     * EXPERIMENTAL: Non-secret files rendered from provider configuration for the
+     * workload. This API and its behavior may change or be removed.
+     *
+     * @generated from field: repeated openshell.v1.ProviderProfileFile files = 14;
+     */
+    files: ProviderProfileFile[];
 };
 /**
  * Describes the message openshell.v1.ProviderProfile.
  * Use `create(ProviderProfileSchema)` to create a new message.
  */
 export declare const ProviderProfileSchema: GenMessage<ProviderProfile>;
+/**
+ * EXPERIMENTAL: Provider file templates may change or be removed.
+ *
+ * @generated from message openshell.v1.ProviderProfileFile
+ */
+export type ProviderProfileFile = Message<"openshell.v1.ProviderProfileFile"> & {
+    /**
+     * One virtual file name below /run/openshell/providers/<provider>/.
+     *
+     * @generated from field: string path = 1;
+     */
+    path: string;
+    /**
+     * UTF-8 template. Only {{config.KEY}} references are supported.
+     *
+     * @generated from field: string content = 2;
+     */
+    content: string;
+    /**
+     * Optional environment variable containing the virtual absolute path.
+     *
+     * @generated from field: string env_var = 3;
+     */
+    envVar: string;
+};
+/**
+ * Describes the message openshell.v1.ProviderProfileFile.
+ * Use `create(ProviderProfileFileSchema)` to create a new message.
+ */
+export declare const ProviderProfileFileSchema: GenMessage<ProviderProfileFile>;
 /**
  * Provider profile response.
  *
@@ -4586,6 +4678,14 @@ export type GetSandboxProviderEnvironmentResponse = Message<"openshell.v1.GetSan
      * @generated from field: openshell.v1.ProviderReadinessReason readiness_reason = 9;
      */
     readinessReason: ProviderReadinessReason;
+    /**
+     * Complete desired set of non-secret managed files, keyed by absolute path.
+     *
+     * @generated from field: map<string, string> files = 10;
+     */
+    files: {
+        [key: string]: string;
+    };
 };
 /**
  * Describes the message openshell.v1.GetSandboxProviderEnvironmentResponse.
@@ -5493,6 +5593,12 @@ export type GatewayMessage = Message<"openshell.v1.GatewayMessage"> & {
          */
         value: RelayClose;
         case: "relayClose";
+    } | {
+        /**
+         * @generated from field: openshell.v1.SessionRedirect session_redirect = 6;
+         */
+        value: SessionRedirect;
+        case: "sessionRedirect";
     } | {
         case: undefined;
         value?: undefined;
@@ -5534,6 +5640,22 @@ export type SupervisorHello = Message<"openshell.v1.SupervisorHello"> & {
      * @generated from field: bool supports_provider_readiness = 4;
      */
     supportsProviderReadiness: boolean;
+    /**
+     * Set when this connection is the result of following a SessionRedirect. The
+     * receiving gateway serves a redirected hello locally instead of redirecting
+     * again, so a disagreement about membership cannot bounce the supervisor
+     * between replicas. A gateway that is shutting down may still redirect it.
+     *
+     * @generated from field: bool redirected = 5;
+     */
+    redirected: boolean;
+    /**
+     * The supervisor understands SessionRedirect. Gateways never redirect a
+     * supervisor that does not set this.
+     *
+     * @generated from field: bool supports_session_redirect = 6;
+     */
+    supportsSessionRedirect: boolean;
 };
 /**
  * Describes the message openshell.v1.SupervisorHello.
@@ -5582,6 +5704,36 @@ export type SessionRejected = Message<"openshell.v1.SessionRejected"> & {
  * Use `create(SessionRejectedSchema)` to create a new message.
  */
 export declare const SessionRejectedSchema: GenMessage<SessionRejected>;
+/**
+ * Gateway declines to own this session and names the replica that should.
+ *
+ * Sent instead of SessionAccepted when the placement ring puts the sandbox on
+ * a different live replica, and to established sessions when their gateway
+ * shuts down. The supervisor reconnects to peer_endpoint once with
+ * SupervisorHello.redirected set, and falls back to its configured gateway
+ * address if that fails.
+ *
+ * @generated from message openshell.v1.SessionRedirect
+ */
+export type SessionRedirect = Message<"openshell.v1.SessionRedirect"> & {
+    /**
+     * Peer endpoint of the replica that should own this sandbox.
+     *
+     * @generated from field: string peer_endpoint = 1;
+     */
+    peerEndpoint: string;
+    /**
+     * Replica ID that should own this sandbox, for logging.
+     *
+     * @generated from field: string owner_replica_id = 2;
+     */
+    ownerReplicaId: string;
+};
+/**
+ * Describes the message openshell.v1.SessionRedirect.
+ * Use `create(SessionRedirectSchema)` to create a new message.
+ */
+export declare const SessionRedirectSchema: GenMessage<SessionRedirect>;
 /**
  * Supervisor heartbeat.
  *
@@ -7478,7 +7630,7 @@ export type SandboxProvisioning = Message<"openshell.v1.SandboxProvisioning"> &
      */
     firstRejectionTime?: Timestamp | undefined;
     /**
-     * Present only while the repair window is armed.
+     * Active preparation or admission-repair deadline. Absent after Ready/timeout.
      *
      * @generated from field: google.protobuf.Timestamp deadline = 5;
      */
@@ -7515,6 +7667,40 @@ export type SandboxProvisioning = Message<"openshell.v1.SandboxProvisioning"> &
      * @generated from field: google.protobuf.Timestamp attachment_change_time = 11;
      */
     attachmentChangeTime?: Timestamp | undefined;
+    /**
+     * Absolute ceiling for image preparation and initial supervisor startup.
+     * Set once per new attempt; progress, configuration writes, and restarts
+     * cannot extend it. Absent on attempts created before preparation timing.
+     *
+     * @generated from field: google.protobuf.Timestamp preparation_deadline = 12;
+     */
+    preparationDeadline?: Timestamp | undefined;
+    /**
+     * First authenticated supervisor configuration report for this attempt.
+     * Starts the admission repair window. Absent while preparing, including
+     * after a preparation timeout. Duplicate reports never change this value.
+     *
+     * @generated from field: google.protobuf.Timestamp admission_start_time = 13;
+     */
+    admissionStartTime?: Timestamp | undefined;
+    /**
+     * An owned driver create/start future is still pending. Claimed before
+     * dispatch and cleared on its actual success or error response. Monitor
+     * interruption, owner loss, and StopSandbox/NotFound do not clear it.
+     * While set, cleanup cannot complete and retry/deletion remain blocked.
+     * This does not strengthen a driver's transport-error settlement contract.
+     *
+     * @generated from field: bool driver_operation_pending = 14;
+     */
+    driverOperationPending: boolean;
+    /**
+     * Unique for each claimed driver operation, including recovery and automatic
+     * restart. Retained after settlement to reject delayed callbacks from an
+     * earlier operation on the same attempt and runtime generation.
+     *
+     * @generated from field: string driver_operation_id = 15;
+     */
+    driverOperationId: string;
 };
 /**
  * Describes the message openshell.v1.SandboxProvisioning.
@@ -7539,6 +7725,12 @@ export type SandboxServiceExposure = Message<"openshell.v1.SandboxServiceExposur
      * @generated from field: uint32 target_port = 2;
      */
     targetPort: number;
+    /**
+     * Application authorization behavior. Omission resolves to STRIP.
+     *
+     * @generated from field: openshell.v1.ServiceAuthorizationMode authorization_mode = 3;
+     */
+    authorizationMode: ServiceAuthorizationMode;
 };
 /**
  * Describes the message openshell.v1.SandboxServiceExposure.
@@ -8145,6 +8337,35 @@ export declare enum ProviderCredentialRefreshRecoveryAction {
  * Describes the enum openshell.v1.ProviderCredentialRefreshRecoveryAction.
  */
 export declare const ProviderCredentialRefreshRecoveryActionSchema: GenEnum<ProviderCredentialRefreshRecoveryAction>;
+/**
+ * Policy applied when the canonical main process exits outside an intentional
+ * stop or delete operation. Kept after existing enums so generated enum
+ * descriptors remain stable.
+ *
+ * @generated from enum openshell.v1.SandboxRestartPolicy
+ */
+export declare enum SandboxRestartPolicy {
+    /**
+     * @generated from enum value: SANDBOX_RESTART_POLICY_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: SANDBOX_RESTART_POLICY_NEVER = 1;
+     */
+    NEVER = 1,
+    /**
+     * @generated from enum value: SANDBOX_RESTART_POLICY_ON_FAILURE = 2;
+     */
+    ON_FAILURE = 2,
+    /**
+     * @generated from enum value: SANDBOX_RESTART_POLICY_ALWAYS = 3;
+     */
+    ALWAYS = 3
+}
+/**
+ * Describes the enum openshell.v1.SandboxRestartPolicy.
+ */
+export declare const SandboxRestartPolicySchema: GenEnum<SandboxRestartPolicy>;
 /**
  * Result of a public delete, membership removal, or session revocation.
  * Default requests return NOT_FOUND for a missing target. With allow_missing,
@@ -8245,6 +8466,36 @@ export declare enum EndpointResult {
  * Describes the enum openshell.v1.EndpointResult.
  */
 export declare const EndpointResultSchema: GenEnum<EndpointResult>;
+/**
+ * Controls whether an exposed service receives the request's application
+ * Authorization header.
+ *
+ * @generated from enum openshell.v1.ServiceAuthorizationMode
+ */
+export declare enum ServiceAuthorizationMode {
+    /**
+     * Omission preserves the secure legacy behavior and resolves to STRIP.
+     *
+     * @generated from enum value: SERVICE_AUTHORIZATION_MODE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Remove Authorization before forwarding to the sandbox service.
+     *
+     * @generated from enum value: SERVICE_AUTHORIZATION_MODE_STRIP = 1;
+     */
+    STRIP = 1,
+    /**
+     * Forward one syntactically valid bearer Authorization header unchanged.
+     *
+     * @generated from enum value: SERVICE_AUTHORIZATION_MODE_BEARER_PASSTHROUGH = 2;
+     */
+    BEARER_PASSTHROUGH = 2
+}
+/**
+ * Describes the enum openshell.v1.ServiceAuthorizationMode.
+ */
+export declare const ServiceAuthorizationModeSchema: GenEnum<ServiceAuthorizationMode>;
 /**
  * OpenShell service provides sandbox, provider, and runtime management capabilities.
  *